Software Engineer, Security

Exa; San Francisco (CA); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Premium healthcare benefits

Fertility benefits

Monthly wellness stipend

Job summary

Exa is an applied AI lab building a search engine with massive-scale infrastructure. We host in-person opportunities in San Francisco and sponsor international candidates (OPT/H1B). We offer premium healthcare, fertility benefits, and a monthly wellness stipend to all employees.

Join Exa to work on security for cutting-edge ML systems, including secrets management, incident response, and secure CI/CD pipelines, in a fast-growing environment.

Qualifications

• Hands-on experience building and maintaining secure infrastructure.
• Knowledge of cloud security fundamentals (multi-account AWS, IAM, secure CI/CD).
• Fluency in secrets management, key management, and certificate lifecycle automation.
• Experience owning compliance efforts such as HIPAA, SOC2, etc.
• Comfort with security hardening and ensuring secure engineering systems.
• Vigilance about vulnerabilities and secure operation with new tech.

Responsibilities

• Build a secrets management and rotation system used across distributed services, training jobs, and GPU clusters without impacting developer velocity.
• Build monitoring and alerting for anomalous behavior across APIs, internal services, and customer usage.
• Create security incident response playbooks and lead incident handling, from detection to post-mortem.

Skills

Secure infrastructure

Cloud security

Secrets management

Compliance (HIPAA/SOC2)

Security hardening

Vulnerability monitoring

Job description

Exa is an applied AI lab building a search engine unlike the world has ever seen. We build massive-scale infra to crawl the entire web, train state-of-the-art embedding models to process it, and design super high performant vector databases to retrieve over it. We now power search for Cursor, Cognition, HubSpot, and over 400,000 developers and have raised $350m from Lightspeed, Benchmark, and a16z. Our ultimate goal is to build perfect search over all the world's information, far beyond Google. If you want to build massive-scale ML systems that will define the way the new AI world consumes information, this is the place for you.

Desired Experience

• You have hands-on experience in building and maintaining secure infrastructure
• You know your way around cloud security fundamentals, including multi-account AWS permissions and architectures, IAM design, secure CI/CD pipelines
• You are fluent in secrets management, key management, and certificate lifecycles (rotation, revocation, automation)
• You have owned compliance efforts such as HIPPA, SOC2, etc.
• You are comfortable with security hardening and any other details needed to make engineering systems run smoothly (VPN, development servers, etc.)
• You are super vigilant about vulnerabilities, potential attacks, and abuse, and constantly think about how to operate securely with the introduction of new technologies (OS-level, AI coding agents, etc.)

Example Projects

• Build a secrets management and rotation system used across distributed services, training jobs, and GPU clusters without impacting developer velocity
• Build monitoring and alerting for anomalous behavior across APIs, internal services, and customer usage
• Create security incident response playbooks and lead incident handling, from detection to post-mortem

This is an in-person opportunity in San Francisco.

We're happy to sponsor international candidates (e.g., STEM OPT, OPT, H1B, O1, E3).

• premium healthcare benefits (medical, dental, vision)
• fertility benefits
• monthly wellness stipend to all of our employees

Exa is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, creed, color, religion, sex, sexual orientation, gender identity or expression, national origin, disability, age, veteran status, marital status, pregnancy or related conditions, criminal histories consistent with applicable law, or any other basis protected by applicable law.